diff --git a/sepolicy/private/system_app.te b/sepolicy/private/system_app.te
new file mode 100644
index 0000000..c9f1b37
--- /dev/null
+++ b/sepolicy/private/system_app.te
@@ -0,0 +1 @@
+hal_client_domain(system_app, hal_mlipay)
diff --git a/sepolicy/vendor/app.te b/sepolicy/vendor/app.te
index 60325ab..bb28850 100644
--- a/sepolicy/vendor/app.te
+++ b/sepolicy/vendor/app.te
@@ -1 +1,2 @@
+get_prop({ appdomain -isolated_app }, vendor_fp_prop)
 get_prop({ appdomain -isolated_app }, vendor_mlipay_prop)
diff --git a/sepolicy/vendor/hal_fingerprint_default.te b/sepolicy/vendor/hal_fingerprint_default.te
index f82c1f5..2bbbb54 100644
--- a/sepolicy/vendor/hal_fingerprint_default.te
+++ b/sepolicy/vendor/hal_fingerprint_default.te
@@ -2,7 +2,7 @@ type vendor_fingerprint_data_file, data_file_type, file_type;
 type vendor_fingerprint_device, dev_type;
 type vendor_hal_fingerprint_hwservice_xiaomi, hwservice_manager_type;
 type vendor_sysfs_udfps, sysfs_type, fs_type;
-vendor_internal_prop(vendor_fp_prop)
+vendor_restricted_prop(vendor_fp_prop)
 vendor_internal_prop(vendor_fp_info_prop)
 
 # Binder
diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts
index 7ea1baa..00f3eea 100644
--- a/sepolicy/vendor/property_contexts
+++ b/sepolicy/vendor/property_contexts
@@ -6,6 +6,7 @@ ro.boot.camera.config    u:object_r:vendor_camera_sensor_prop:s0
 persist.vendor.sys.fp.    u:object_r:vendor_fp_prop:s0
 persist.vendor.sys.fp.info    u:object_r:vendor_fp_info_prop:s0
 persist.vendor.sys.fp.uid    u:object_r:vendor_fp_info_prop:s0
+ro.hardware.fp    u:object_r:vendor_fp_prop:s0
 
 # Mlipay
 persist.vendor.sys.pay.                 u:object_r:vendor_mlipay_prop:s0